EC-Council 712-50 Practice Exams
Last updated on Oct 23,2026- Exam Code: 712-50
- Exam Name: EC-Council Certified CISO (CCISO)
- Certification Provider: EC-Council
- Latest update: Oct 23,2026
Which of the following is the MAIN security concern for public cloud computing?
- A . Unable to control physical access to the servers
- B . Unable to track log on activity
- C . Unable to run anti-virus scans
- D . Unable to patch systems as needed
A business unit within your organization intends to deploy a new technology in a manner that places it in violation of existing information security standards.
What immediate action should the information security manager take?
- A . Enforce the existing security standards and do not allow the deployment of the new technology.
- B . Amend the standard to permit the deployment.
- C . If the risks associated with that technology are not already identified, perform a risk analysis to quantify the risk, and allow the business unit to proceed based on the identified risk level.
- D . Permit a 90-day window to see if an issue occurs and then amend the standard if there are no issues.
If a Virtual Machine’s (VM) data is being replicated and that data is corrupted, this corruption will automatically be replicated to the other machine(s).
What would be the BEST control to safeguard data integrity?
- A . Backup to tape
- B . Maintain separate VM backups
- C . Backup to a remote location
- D . Increase VM replication frequency
You are the CISO for an investment banking firm. The firm is using artificial intelligence (AI) to assist in approving clients for loans.
Which control is MOST important to protect AI products?
- A . Hash datasets
- B . Sanitize datasets
- C . Delete datasets
- D . Encrypt datasets
Providing oversight of a comprehensive information security program for the entire organization is the primary responsibility of which group under the InfoSec governance framework?
- A . Senior Executives
- B . Office of the Auditor
- C . Office of the General Counsel
- D . All employees and users
The remediation of a specific audit finding is deemed too expensive and will not be implemented.
Which of the following is a TRUE statement?
- A . The asset is more expensive than the remediation
- B . The audit finding is incorrect
- C . The asset being protected is less valuable than the remediation costs
- D . The remediation costs are irrelevant; it must be implemented regardless of cost.
SCENARIO: Critical servers show signs of erratic behavior within your organization’s intranet. Initial information indicates the systems are under attack from an outside entity. As the Chief Information Security Officer (CISO), you decide to deploy the Incident Response Team (IRT) to determine the details of this incident and take action according to the information available to the team.
During initial investigation, the team suspects criminal activity but cannot initially prove or disprove illegal actions.
What is the MOST critical aspect of the team’s activities?
- A . Regular communication of incident status to executives
- B . Eradication of malware and system restoration
- C . Determination of the attack source
- D . Preservation of information
Which of the following is a critical operational component of an Incident Response Program (IRP)?
- A . Weekly program budget reviews to ensure the percentage of program funding remains constant.
- B . Annual review of program charters, policies, procedures and organizational agreements.
- C . Daily monitoring of vulnerability advisories relating to your organization’s deployed technologies.
- D . Monthly program tests to ensure resource allocation is sufficient for supporting the needs of the organization
Which of the following is considered the MOST effective tool against social engineering?
- A . Anti-phishing tools
- B . Anti-malware tools
- C . Effective Security Vulnerability Management Program
- D . Effective Security awareness program
Annual Loss Expectancy is derived from the function of which two factors?
- A . Annual Rate of Occurrence and Asset Value
- B . Single Loss Expectancy and Exposure Factor
- C . Safeguard Value and Annual Rate of Occurrence
- D . Annual Rate of Occurrence and Single Loss Expectancy